Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SNYK Security Vulnerablity: ReDoS #9

Open
staghouse opened this issue Aug 15, 2019 · 2 comments
Open

SNYK Security Vulnerablity: ReDoS #9

staghouse opened this issue Aug 15, 2019 · 2 comments

Comments

@staghouse
Copy link

staghouse commented Aug 15, 2019 •
edited

Description

snyk package reports vulnerability with remove-markdown dependency

See this issue

Expected Behavior

To not have a security issue

Actual Behavior

Has a security issue

Steps to Reproduce

Run snyk on a vuepress instance using this plugin

Your Environment

Description Value
vuepress-plugin-feed version 0.1.7
node version 12.8.0
npm version 6.10.2
OS OSX 10.14.5
@webmasterish
Copy link
Owner

Thank you @staghouse for pointing it out.

Will have to wait for remove-markdown dependency to be updated, unless you have a ready solution. Do you?

@staghouse
Copy link
Author

Currently no. Sorry

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@webmasterish @staghouse